kingfisher/crates/kingfisher-rules/data/rules/datastax.yml
2026-03-29 10:41:54 -07:00

33 lines
974 B
YAML

rules:
- name: DataStax Astra Application Token
id: kingfisher.datastax.1
pattern: |
(?x)
\b
(
AstraCS:[A-Za-z0-9]{20,}
)
\b
pattern_requirements:
min_digits: 2
min_entropy: 4.0
confidence: medium
examples:
- ASTRA_DB_APPLICATION_TOKEN=AstraCS:Q29kZXhWYWxpZGF0aW9uVG9rZW5FeGFtcGxlMTIzNDU2Nzg5
references:
- https://docs.datastax.com/en/astra-db-serverless/administration/manage-application-tokens.html
- https://docs.datastax.com/en/astra-db-classic/api-reference/devops-api.html
validation:
type: Http
content:
request:
method: GET
url: https://api.astra.datastax.com/v2/databases
headers:
Authorization: Bearer {{ TOKEN }}
Accept: application/json
response_matcher:
- report_response: true
- type: StatusMatch
status: [200]
- type: JsonValid